PT-2026-71540
CVE-2026-61974
·
تاريخ النشر
2026-08-13
·
تاريخ التحديث
2026-10-23
الوصف من
CVSS 3.1
7.1
عاليةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions
Mang Board WP versions prior to 2.3.5
Description
The Mang Board WP plugin for WordPress contains a stored Cross-Site Scripting (XSS) flaw. This issue occurs because of insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject arbitrary web scripts into pages. These scripts execute automatically when a user visits the affected page.
Recommendations
Update Mang Board WP to version 2.3.5 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾